CSP (Content Security Policy)

Also written: CSP, Content Security Policy, default-src 'self'

A rule telling Chromium where a page may load things from. `default-src 'self'` allows only the app's own files and blocks inline script.

Where the book teaches it